For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Toby_Demetrovic's avatar
Toby_Demetrovic
Icon for Nimbostratus rankNimbostratus
Mar 26, 2014

GTM issue returning non authoritative responses

Hi all, slight problem with our External DNS servers. Our GTMS are fowarding to internal boxes where the zones are authoritative. 99% of the time this works. But we have a certain ISP that is dropping packets. Due to our authoritative server responding that it is a recursive server. I'm wondering if there is an irule we can spin up that says when dns response for zone xray is requested, change the header bits to be authoritative rather then recursive in nature. Thoughts? First time posting here hope its legible.

 

External dns gns1.xray.com > ns11.xray.com(authoritative)

 

application delivery
BIG-IP DNS
devops
iRules
LTM

2 Replies

  • gbbaus_104974's avatar
    gbbaus_104974
    Historic F5 Account
    Mar 26, 2014

    Hi

     

    What about using the GTM as an Authoritative slave. ie Do a Zone transfer from the 'ns11.xray.com' server to the GTM (gns1.xray.com) and allow the GTM to reply directly, vs having the GTM forward the request on ?

     

    You would need to enable 'DNS Express' on the GTM.

     

    I am not sure what version of code, but if running v11.2 or v11.3 and above you should have that capability available to you.

     

    • bboyjnr_8532's avatar
      bboyjnr_8532
      Icon for Cirrus rankCirrus
      Mar 26, 2014
      not trying to be one up or anything but you could enable dns cache also.